Commits

Commit history

1. Commits on Sep 26, 2012

   • Cleaning/refactoring of bunch of stacked/suffix/comment stuff (e.g.

     stamparm

     committed
     687f399View commit details

     Copy full SHA for 687f399

     View code at this pointBrowse repository at this point
2. Commits on Sep 17, 2012

   • Removing boundaries (it were meant to be used as 'parameter replace' logic but it's not doable for boundaries)

     stamparm

     committed
     67cfc3bView commit details

     Copy full SHA for 67cfc3b

     View code at this pointBrowse repository at this point

   • Minor update

     stamparm

     committed
     acad7a3View commit details

     Copy full SHA for acad7a3

     View code at this pointBrowse repository at this point
3. Commits on Sep 7, 2012

   • Fix for an Issue #175

     stamparm

     committed
     f26ea04View commit details

     Copy full SHA for f26ea04

     View code at this pointBrowse repository at this point
4. Commits on Aug 23, 2012

   • Updating server.xml with fresh banners

     stamparm

     committed
     59ab3c7View commit details

     Copy full SHA for 59ab3c7

     View code at this pointBrowse repository at this point
5. Commits on Aug 22, 2012

   • Fixing INSERT/UPDATE generic boundaries (those previous few were junkies)

     stamparm

     committed
     d7cf0deView commit details

     Copy full SHA for d7cf0de

     View code at this pointBrowse repository at this point
6. Commits on Aug 20, 2012

   • Making payloads a bit shorter (removing redundant space after comma character - e.g. in inband queries)

     stamparm

     committed
     8ee9feaView commit details

     Copy full SHA for 8ee9fea

     View code at this pointBrowse repository at this point
7. Commits on Aug 6, 2012

   • Fix by zhouhx@knownsec.com (better LIKE boundaries)

     stamparm

     committed
     6fdbe4eView commit details

     Copy full SHA for 6fdbe4e

     View code at this pointBrowse repository at this point
8. Commits on Jul 26, 2012

   • Revert of a previous commit (actually missing mysql.db is a bonus in this kind of attack :)

     stamparm

     committed
     57f2fccView commit details

     Copy full SHA for 57f2fcc

     View code at this pointBrowse repository at this point

   • Safer for provoking 'Subquery returns more than 1 row' state than potentially missing mysql.db

     stamparm

     committed
     ec96689View commit details

     Copy full SHA for ec96689

     View code at this pointBrowse repository at this point

   • Style update

     stamparm

     committed
     6878ef9View commit details

     Copy full SHA for 6878ef9

     View code at this pointBrowse repository at this point

   • Implementation of payloads for Issue #122

     stamparm

     committed
     ab31603View commit details

     Copy full SHA for ab31603

     View code at this pointBrowse repository at this point
9. Commits on Jul 21, 2012

   • Fix for an Issue #110

     stamparm

     committed
     95e0d46View commit details

     Copy full SHA for 95e0d46

     View code at this pointBrowse repository at this point
10. Commits on Jul 20, 2012

    • fixes issue #97

      bdamele

      committed
      1928d54View commit details

      Copy full SHA for 1928d54

      View code at this pointBrowse repository at this point
11. Commits on Jul 17, 2012

    • more on issue #97

      bdamele

      committed
      243a905View commit details

      Copy full SHA for 243a905

      View code at this pointBrowse repository at this point

    • added payloads for ORDER BY/GROUP BY time-based injections - issue #97

      bdamele

      committed
      c483e91View commit details

      Copy full SHA for c483e91

      View code at this pointBrowse repository at this point

    • Initial commit for issue #97

      bdamele

      committed
      771e7a9View commit details

      Copy full SHA for 771e7a9

      View code at this pointBrowse repository at this point
12. Commits on Jul 11, 2012

    • added --hostname switch to retrieve DBMS server hostname - closes issue #69

      bdamele

      committed
      53c0336View commit details

      Copy full SHA for 53c0336

      View code at this pointBrowse repository at this point
13. Commits on Jul 3, 2012

    • Update for Issue #55 (falling back to SELECT DB_NAME(N))

      stamparm

      committed
      27fdcccView commit details

      Copy full SHA for 27fdccc

      View code at this pointBrowse repository at this point
14. Commits on Jun 11, 2012

    • minor refactoring

      stamparm

      committed
      5d35d25View commit details

      Copy full SHA for 5d35d25

      View code at this pointBrowse repository at this point
15. Commits on May 22, 2012

    • fixing an issue with --file-read and ROW() MySQL payload (it's internal caching mechanism prevents error message if FROM part is not unique enough dumping only partial file content); minor refactoring

      stamparm

      committed
      2538e2dView commit details

      Copy full SHA for 2538e2d

      View code at this pointBrowse repository at this point
16. Commits on May 21, 2012

    • adding revisited wildcard LIKE payloads

      stamparm

      committed
      3a9e266View commit details

      Copy full SHA for 3a9e266

      View code at this pointBrowse repository at this point

    • reverting last changes on boundaries

      stamparm

      committed
      602369cView commit details

      Copy full SHA for 602369c

      View code at this pointBrowse repository at this point

    • adding a new payload boundaries by smcintyre@securestate.com

      stamparm

      committed
      1500b3fView commit details

      Copy full SHA for 1500b3f

      View code at this pointBrowse repository at this point
17. Commits on May 9, 2012

    • making a generic solution for all "Generic comment"/MsAccess cases (it's the only DBMS which doesn't accept --, hence replacing generic comment with %00 for it)

      stamparm

      committed
      37f2709View commit details

      Copy full SHA for 37f2709

      View code at this pointBrowse repository at this point
18. Commits on May 8, 2012

    • adding Frontbase to error message regexes

      stamparm

      committed
      deec97dView commit details

      Copy full SHA for deec97d

      View code at this pointBrowse repository at this point
19. Commits on May 3, 2012

    • fix for proper (international character) inference on MsAccess

      stamparm

      committed
      57234e1View commit details

      Copy full SHA for 57234e1

      View code at this pointBrowse repository at this point
20. Commits on Apr 25, 2012

    • reverting back to smaller UNION ranges as that mechanism for automatic extending was implemented few days ago

      stamparm

      committed
      1e45ee9View commit details

      Copy full SHA for 1e45ee9

      View code at this pointBrowse repository at this point
21. Commits on Apr 23, 2012

    • increased UNION test ranges

      bdamele

      committed
      eb73cabView commit details

      Copy full SHA for eb73cab

      View code at this pointBrowse repository at this point
22. Commits on Apr 13, 2012

    • new payload

      stamparm

      committed
      414c74bView commit details

      Copy full SHA for 414c74b

      View code at this pointBrowse repository at this point
23. Commits on Apr 4, 2012

    • switch two conditional payloads for proper detection

      bdamele

      committed
      1f82d29View commit details

      Copy full SHA for 1f82d29

      View code at this pointBrowse repository at this point

    • minor revert

      bdamele

      committed
      d5b4b79View commit details

      Copy full SHA for d5b4b79

      View code at this pointBrowse repository at this point
24. Commits on Apr 3, 2012

    • improved detection for INSERT and UPDATE statements

      bdamele

      committed
      049c27cView commit details

      Copy full SHA for 049c27c

      View code at this pointBrowse repository at this point
25. Commits on Mar 30, 2012

    • Minor fix to avoid useless tests (FROM DUAL is Oracle specific so no point using + to concatenate strings)

      bdamele

      committed
      40a7232View commit details

      Copy full SHA for 40a7232

      View code at this pointBrowse repository at this point
26. Commits on Mar 29, 2012

    • improvement toward proper implementation of OR-based injection by usage of "negative logic" mechanism

      stamparm

      committed
      637a8d8View commit details

      Copy full SHA for 637a8d8

      View code at this pointBrowse repository at this point